Privacy Policy for Pinbloom

Last updated: 06-09-2026  ·  Effective date: 06-09-2026

1. Introduction

This Privacy Policy explains how Pinbloom (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use the Pinbloom mobile application (the “App”).

Pinbloom is a vision board and goal-setting app. It lets you build draggable corkboards of images, text, and stickers, and it offers AI-assisted goal planning features including roadmaps, habit suggestions, and milestone tracking.

By using Pinbloom, you agree to the practices described in this Policy. If you do not agree, please do not use the App.

Data controller: Pinbloom. We operate solely online and do not maintain a public physical business address; the fastest and most reliable way to reach us is by email.
Privacy contact: pinbloom.support@gmail.com
EU/UK representative: Pinbloom does not currently designate a representative in the EU or UK under GDPR Article 27 / UK GDPR Article 27. We are not currently established in, and do not specifically direct or market Pinbloom to, the EEA or the UK. We will appoint a representative if that changes.

2. Scope

This Policy applies to all users of Pinbloom worldwide. Additional rights and disclosures apply to:

• Users in the European Economic Area (EEA) and Switzerland (see Section 11)
• Users in the United Kingdom (see Section 11)
• Users in California (see Section 12)
• Users in other jurisdictions with data protection laws (see Section 13)

3. Information We Collect

3.1 Account information

When you create an account, we collect:

• Your email address
• Authentication credentials and identifiers managed through Supabase Auth
• If you sign in with Google: your Google account email address, name, profile picture, and a unique Google account identifier, provided to us via Google Sign-In (OAuth). We do not receive or store your Google password.
• Account creation date and last sign-in timestamps

3.2 Content you create

Pinbloom stores the content you put into it, including:

• Images and photos you upload to your boards, stored in a private cloud storage bucket that is not publicly accessible and not indexed by search engines
• Text content you type into the App: goal titles, goal descriptions, notes, journal-style entries, habit names, milestone names, board and sticker labels
• Board structure and layout, including the arrangement, sizing, and positioning of items on your boards
• Progress data, such as habit completions, streaks, and milestone status

We do not review or moderate your private board content except where necessary to respond to a support request you make, to investigate a suspected violation of our Terms of Service, or where required by law.

3.3 Content processed by AI features

When you use an AI feature (for example, to generate a roadmap, suggest milestones, suggest habits, or generate a motivational message), the following is transmitted from our backend to the Google Gemini API:

• The goal title and description you wrote
• Related notes and existing plan data associated with that goal
• Contextual instructions we add to shape the output

This transmission happens server-side from our backend, not directly from your device. Your images are not sent to the Gemini API.

Please see Section 5 for a fuller explanation of how AI processing works and what it means for your data.

3.4 Usage data

• A count of how many AI-generation actions you have used in the current billing or calendar month, which we use to enforce free-tier limits
• General feature interaction and app usage information (for example, which features are opened and how often)
• Basic technical information necessary to operate the service, such as device type, operating system version, app version, IP address, and error/crash information

3.5 Advertising data

Pinbloom shows opt-in rewarded video ads only. We do not display banner ads, interstitial ads, or any passive advertising. You will only ever see an ad if you actively choose to watch one in exchange for an in-app benefit, such as unlocking additional usage.

Rewarded ads are served by Google AdMob. When you choose to watch a rewarded ad, AdMob may collect:

• Your device’s advertising identifier (Android Advertising ID)
• Device and network information, including IP address, device model, operating system, and coarse location inferred from IP address
• Ad interaction data, such as whether an ad was viewed, completed, or clicked

This data is collected by Google under Google’s own advertising data practices. See policies.google.com/technologies/ads and support.google.com/admob/answer/6128543.

Consent and personalization. Before any advertising request is made, we present a consent prompt using Google’s User Messaging Platform. Your choice determines what happens next:

• If you consent to personalized advertising, Google may use your advertising identifier and the data above to select ads based on your interests and activity across other apps and websites.
• If you decline, or if you have not been asked, we request non-personalized ads only. Non-personalized ads are selected using contextual signals rather than your interest profile. Google may still access limited device data for frequency capping, ad reporting, and fraud prevention.

You can change this choice at any time in Settings → Privacy → Ad preferences in the App. You can also reset or delete your Android Advertising ID, or turn off ad personalization entirely, in your device settings.

The Google Mobile Ads SDK initializes when the App launches, and, before any advertisement can ever be shown, checks with Google’s consent service to determine whether you are somewhere that requires the consent prompt described above. This initialization and consent check happens on every app launch, regardless of whether you ever choose to watch an ad. An actual advertisement is only requested if, and when, you choose to watch one.

3.6 Payment and subscription data

Once paid subscriptions are available:

• Subscription purchases are processed by Google Play Billing. We never receive, collect, or store your payment card number, bank details, or billing address.
• RevenueCat manages subscription state and entitlements on our behalf. RevenueCat receives a pseudonymous user identifier, purchase and receipt information, subscription status, and related transaction metadata from Google Play.
• We store your subscription status (for example, active, expired, cancelled) so we can provide the features you have paid for.

3.7 Information we do not collect

We do not collect precise GPS location, contacts, calendar data, microphone audio, camera streams (beyond images you explicitly choose to upload), health platform data, or biometric identifiers.

3.8 Sensitive information

Pinbloom is an open-ended goal-setting tool. Depending on what you choose to write, your goals, notes, and journal entries could contain information you consider sensitive: for example, information about your health, fitness, mental wellbeing, finances, relationships, religion, or political views.

We ask you not to enter information into Pinbloom that you would not want stored on our systems or processed by our AI provider. If you do enter such information, you are choosing to provide it to us, and where required by law we rely on your explicit consent to process it (see Section 11.2).

4. How We Use Your Information

We do not sell your personal information for money. See Section 12.3 regarding how “sale” and “share” are defined under California law and how rewarded advertising may fall within the definition of “sharing.”

We do not use your content to train our own AI models.

5. AI Processing: How It Works

We want to be specific about this, because it is the part of Pinbloom that most directly involves sending your writing to a third party.

What happens: When you tap an AI feature, your device sends the relevant goal text to our backend (hosted on Supabase). Our backend then calls the Google Gemini API, passing your text along with our own instructions. Google’s systems generate a response, our backend receives it, and we return the result to your device and store it with your goal.

Who processes it: Google processes this content as a service provider / data processor acting on our instructions, under the terms applicable to the Gemini API tier we use.

Data use for model improvement: Google’s terms differ by API tier. On paid Gemini API service, Google does not use prompts or responses to improve its products, and processes them under a data processing addendum. We currently use the free tier of the Gemini API. Under Google’s terms for the free tier, Google may use the prompts and responses submitted to it to improve Google’s own products, and this content may be subject to human review by Google or its service providers as part of that process. This means that, for AI-processed content specifically, Google is not acting purely as our data processor; it may also use this content for its own purposes, separate from providing the AI Output back to us. We intend to move to a paid tier of the Gemini API, which would remove this product-improvement use and restore a pure processor relationship; this Policy will be updated when that happens.

Where it is processed: Google may process this data on servers outside your country of residence, including in the United States. See Section 9.

What is not sent: We do not send your uploaded images, your email address, your name, or your payment information to the Gemini API.

Accuracy: AI output is generated by a statistical model and may be inaccurate, incomplete, generic, or unsuitable for your circumstances. See Section 6 of our Terms of Service for the full disclaimer.

6. Legal Bases for Processing (EEA / UK Users)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases:

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.

7. Who We Share Information With

We share personal information only with the service providers listed below, and only as needed to operate Pinbloom. We do not sell your personal information, and we do not share it with data brokers.

We may also disclose personal information:

• To comply with applicable law, legal process, or an enforceable governmental request
• To enforce our Terms of Service or investigate potential violations
• To protect the rights, property, or safety of our users, the public, or us
• In connection with a merger, acquisition, financing, or sale of assets (in which case we will notify you before your information becomes subject to a different privacy policy)

8. Data Retention

Data held by Google (AdMob, Gemini, Play Billing) and RevenueCat is retained according to their own policies, which we do not control.

9. International Data Transfers

We are established in Ontario, Canada. Your personal information is transferred to, stored in, and processed in the United States.

Our backend is hosted by Supabase in the AWS us-east-2 region (Ohio, United States). This means that if you use Pinbloom from outside the United States, your account data, the images you upload, and the text content you create are transferred to and stored on servers in the United States. This is not occasional or incidental: it applies to every user, on every use of the App.

In addition:

• AI processing takes place on Google’s infrastructure, which may be located in the United States or other countries.
• Advertising, authentication, and subscription data is processed by Google and RevenueCat on infrastructure that may be located in the United States or other countries.

Where we transfer personal data out of the EEA, Switzerland, or the UK, we rely on one or more of the following safeguards:

• The European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum for UK transfers), incorporated into our agreements with our processors
• An adequacy decision covering the destination country, where one applies
• Our providers’ participation in the EU–US Data Privacy Framework and its UK and Swiss extensions, where applicable

You may request a copy of the relevant safeguards by contacting pinbloom.support@gmail.com.

10. Your Rights and How to Exercise Them

Depending on where you live, you may have some or all of the following rights:

• Access: obtain confirmation of whether we process your personal data, and a copy of it
• Portability: receive your data in a structured, commonly used, machine-readable format, or have it transmitted to another controller where technically feasible
• Correction: have inaccurate personal data corrected
• Deletion / erasure: have your personal data deleted, subject to legal exceptions
• Restriction: request that we limit processing in certain circumstances
• Objection: object to processing based on legitimate interests, and object at any time to processing for direct marketing
• Withdraw consent: where processing is based on consent
• Non-discrimination: not be treated differently for exercising your privacy rights

10.1 How to make a request

You can edit or delete individual boards, goals, images, and notes directly in the App at any time.

For account-level requests (access, export, correction, or deletion of your account and all associated data), contact us at pinbloom.support@gmail.com, or delete your account directly in the App (see Section 10.2).

10.2 How account deletion works

You can delete your account and its associated data at any time.

From within the App: open Settings → Account → Delete Account, and confirm. You will be asked to re-confirm because the action cannot be undone.

Without the App installed: email us at pinbloom.support@gmail.com from the address registered to your account and request deletion. We will verify that the request comes from the account holder by confirming control of that email address before completing it.

What gets deleted. When a deletion is confirmed, we delete:

• Your account record and authentication credentials held in Supabase Auth
• All images and files you uploaded, from our private storage bucket
• All text content associated with your account: boards, goals, descriptions, notes, journal entries, habits, milestones, and progress data
• All AI-generated content stored against your account
• Your AI usage counters
• Your subscription entitlement record held by us and by RevenueCat

Timing. Deletion initiated in the App runs immediately and synchronously: your storage files and account record are deleted within seconds, before the confirmation is shown to you. Email-based requests are completed within 30 days of our verifying your identity, and normally much sooner. If a request is unusually complex, we may extend this by up to a further 60 days as permitted under Article 12(3) GDPR, and we will tell you if that happens and why.

What may remain.

• We do not currently maintain backups of our database, so deleted data does not persist anywhere after deletion completes.
• We retain transaction and tax records where we are legally required to do so, as described in Section 8.
• We retain a minimal, non-content record that a deletion occurred, so we can demonstrate compliance.
• Data held independently by Google (AdMob, Play Billing) is subject to Google’s own retention and deletion practices, which we do not control. You can manage your Google advertising data at myadcenter.google.com.

Deleting the App from your device does not delete your account or your data. You must use one of the two methods above.

We will respond to all rights requests without undue charge. We may refuse or charge a reasonable fee for requests that are manifestly unfounded or excessive, particularly if repetitive.

10.3 Complaints

If you are in the EEA, Switzerland, or the UK, you have the right to lodge a complaint with your local supervisory authority. In the UK, that is the Information Commissioner’s Office (ico.org.uk). A list of EEA authorities is available at edpb.europa.eu.

We would appreciate the chance to address your concern first. Please contact pinbloom.support@gmail.com.

11. Additional Information for EEA, Swiss, and UK Users

11.1 Controller. Pinbloom is the controller of your personal data as described in this Policy.

11.2 Special category data. Goals, notes, and journal entries you write may reveal information about your health, sex life, religious or philosophical beliefs, or political opinions. Where such data falls within Article 9 GDPR, we process it on the basis of your explicit consent, which you give by choosing to enter that information into the App and, where applicable, by accepting the in-app consent prompt. You can withdraw that consent by deleting the relevant content or your account.

11.3 Automated decision-making. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. AI-generated roadmaps and habit suggestions are informational content shown to you; they do not determine your access to the service, your pricing, or any legal right.

11.4 Statutory or contractual requirement. Providing an email address is necessary to create an account. All other information is optional, though the App will have limited functionality without content.

12. Additional Information for California Residents (CCPA / CPRA)

This section applies to California residents and supplements the rest of this Policy.

12.1 Categories of personal information collected

In the past 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act:

12.2 Purposes

We collect these categories for the business purposes described in Section 4. We retain them for the periods described in Section 8.

12.3 Sale and sharing

We do not sell your personal information for monetary consideration.

However, “sale” and “share” are defined broadly under the CPRA. “Share” includes disclosing personal information to a third party for cross-context behavioral advertising. Because Pinbloom serves rewarded ads through Google AdMob, and AdMob may use advertising identifiers and device data to serve personalized ads, our advertising integration may constitute “sharing” under the CPRA unless personalized advertising is disabled.

Our default configuration is non-personalized advertising. Personalized advertising is served only to users who have affirmatively opted in through the consent prompt described in Section 3.5.

To the extent that serving personalized ads through Google AdMob constitutes “sharing” for cross-context behavioral advertising, you may opt out at any time:

• Use the “Do Not Sell or Share My Personal Information” control in Settings → Privacy in the App
• Or email pinbloom.support@gmail.com

We honor Global Privacy Control and other opt-out preference signals where they are transmitted to us and technically feasible.

Opting out does not stop you from earning rewards for watching ads. It only changes how the ads shown to you are selected.

We have not sold or shared the personal information of consumers we know to be under 16 years of age.

12.4 Use and disclosure of sensitive personal information

We do not use or disclose sensitive personal information for purposes other than those permitted under CPRA § 1798.121(a), that is, to provide the service you request, to secure accounts, and to perform services on our behalf. We do not use it to infer characteristics about you.

12.5 Your California rights

California residents have the rights to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and to non-discrimination. Exercise them by emailing pinbloom.support@gmail.com or, for deletion, using Settings → Account → Delete Account in the App.

We will verify your request by confirming control of the email address associated with your account. You may use an authorized agent to submit a request on your behalf; we may require proof of authorization and may require you to verify your own identity directly.

12.6 Shine the Light

California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13. Other Jurisdictions

Canada. We handle personal information in accordance with PIPEDA and applicable provincial privacy legislation. Canadian residents may request access to and correction of their personal information at pinbloom.support@gmail.com, and may complain to the Office of the Privacy Commissioner of Canada.

Other US states. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising and profiling. Exercise these at pinbloom.support@gmail.com. Where a state provides an appeal mechanism for a denied request, you may appeal by replying to our decision; we will respond within the statutory period.

Brazil (LGPD), Australia (Privacy Act), and elsewhere. We seek to give all users the substantive rights described in Section 10, regardless of location. Contact pinbloom.support@gmail.com with any request.

14. Children’s Privacy

Pinbloom is not intended for and may not be used by anyone under the age of 16.

We do not knowingly collect personal information from children under 16. We do not currently operate an age verification or age-gating mechanism; we rely on your representation, made when you create an account and accept our Terms of Service, that you are at least 16 years old.

If you are a parent or guardian and believe your child under 16 has provided us with personal information, contact us at pinbloom.support@gmail.com and we will delete the account and associated data promptly.

15. Security

We use technical and organizational measures to protect your information, including:

• Encryption in transit (TLS) for all communication between the App, our backend, and our providers
• Encryption at rest for data stored by Supabase
• Row-level security policies restricting database access to the owning user
• Private storage buckets with signed, time-limited URLs: your uploaded images are not publicly accessible
• Access controls limiting administrative access to authorized personnel

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required, and notify affected users without undue delay where the law requires it.

16. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top.

If we make a material change (for example, adding a new category of data collection, a new processor, or a new purpose), we will provide notice through the App or by email to your registered address before the change takes effect, and where the law requires it, we will obtain your consent.

Your continued use of Pinbloom after a change takes effect constitutes acceptance of the updated Policy, except where consent is legally required.

17. Contact Us

Pinbloom
Email: pinbloom.support@gmail.com
Privacy Policy: pinbloom.top/privacy.html
Terms of Service: pinbloom.top/terms.html
Account deletion requests: use Settings → Account → Delete Account in the App, or email pinbloom.support@gmail.com.

We aim to respond to all privacy enquiries within 30 days.